Bored this weeked? Fix your Domino server.

by Volker Weber

ibmcertificateexpired

Security certificates on Java applets in Domino, Sametime and Quickr will expire next Monday, depending on which version of Domino you are running and which applets you are using. If you want to avoid this issue, read this document and act on it. Not much work, but saves a lot of trouble.

Here is a recording of the conference call regarding this issue.

Comments

Lotus, the Verpeiler Company™

I already installed the fix, but I wonder why they didn't roll out up-to-date signatures with 8.5.
It seems to me that their release engineering gets worse over time – producing major horkage with signatures from the stone age should be on the product management's radar…

Karsten W. Rohrbach, 2009-05-14

yes, will be some busy days. I have tested the new applets but there are still certificates expiring next week thou you install the fix. Check the applet used for iNotes 8. It will expire 21/05. - So the fix wont solve this. Be prepared.

/Kjeld

Kjeld Vang Larsen, 2009-05-14

It also effects, Quickr, Quickplace and Sametime, see our homepage for the links off to the relevant technotes.

Andy Dennis, 2009-05-14

"producing major horkage with signatures from the stone age should be on the product management's radar"

->Those applets are also from the stone age ;-)

Karsten Lehmann, 2009-05-14

@Kjeld, could you elaborate on the iNotes 8 applet issue?
Do you mean that after applying the 8.0 jar fix, you see signatures appearing from 21 may 2009? How did you test this? I do not see this date in any of the received signatures. Which applet is the culprit according to you?

Marzel Laning, 2009-05-14

Here's an excerpt from the "act on it" technote (4022981) vowe highlighted:
Are iNotes (Domino Web Access) users impacted by this?
iNotes (Domino Web Access) templates do not contain applets and are not impacted. However, if you integrate with a Sametime server, the stlinks.jar is signed and could be impacted by this issue.

What actions are required for Lotus iNotes (Domino Web Access) servers?
For Lotus iNotes servers,...
-----
Perhaps Kjeld missed the extra steps required to properly handle stlinks.jar.

Rod Stauffer, 2009-05-14

I posted a full call transcript. there are a lot of moving parts and some of the above are answered..
here is the link

Chris Miller, 2009-05-14

Old vowe.net archive pages

I explain difficult concepts in simple ways. For free, and for money. Clue procurement and bullshit detection.

vowe

Paypal vowe